resource "azurerm_automanage_configuration" "automanage_configs" {
  for_each                    = { for k, v in var.automanage_configurations : k => v }
  name                        = each.value.name
  resource_group_name         = each.value.rg_name
  location                    = each.value.location
  tags                        = each.value.tags
  automation_account_enabled  = each.value.automation_account_enabled
  boot_diagnostics_enabled    = each.value.boot_diagnostics_enabled
  defender_for_cloud_enabled  = each.value.defender_for_cloud_enabled
  guest_configuration_enabled = each.value.guest_configuration_enabled
  log_analytics_enabled       = each.value.log_analytics_enabled
  status_change_alert_enabled = each.value.status_change_alert_enabled

  dynamic "antimalware" {
    for_each = each.value.antimalware != null ? [each.value.antimalware] : []
    content {
      real_time_protection_enabled   = antimalware.value.real_time_protection_enabled
      scheduled_scan_enabled         = antimalware.value.scheduled_scan_enabled
      scheduled_scan_type            = antimalware.value.scheduled_scan_type
      scheduled_scan_day             = antimalware.value.scheduled_scan_day
      scheduled_scan_time_in_minutes = antimalware.value.scheduled_scan_time_in_minutes

      dynamic "exclusions" {
        for_each = antimalware.value.exclusions != null ? [antimalware.value.exclusions] : []
        content {
          extensions = exclusions.value.extensions
          paths      = exclusions.value.paths
          processes  = exclusions.value.processes
        }
      }
    }
  }

  dynamic "azure_security_baseline" {
    for_each = each.value.azure_security_baseline != null ? [each.value.azure_security_baseline] : []
    content {
      assignment_type = azure_security_baseline.value.assignment_type
    }
  }

  dynamic "backup" {
    for_each = each.value.backup != null ? [each.value.backup] : []
    content {
      policy_name                        = backup.value.policy_name
      time_zone                          = backup.value.time_zone
      instant_rp_retention_range_in_days = backup.value.instant_rp_retention_in_days

      dynamic "schedule_policy" {
        for_each = backup.value.schedule_policy != null ? [each.value.schedule_policy] : []
        content {
          schedule_run_frequency = schedule_policy.value.schedule_run_frequency
          schedule_run_times     = schedule_policy.value.schedule_run_times
          schedule_run_days      = schedule_policy.value.schedule_run_days
          schedule_policy_type   = schedule_policy.value.schedule_policy_type
        }
      }

      dynamic "retention_policy" {
        for_each = backup.value.retention_policy != null ? [each.value.retention_policy] : []
        content {

          retention_policy_type = retention_policy.value.retention_policy_type

          dynamic "daily_schedule" {
            for_each = retention_policy.value.daily_schedule != null ? [retention_policy.value.daily_schedule] : []
            content {
              retention_times = []

              dynamic "retention_duration" {
                for_each = daily_schedule.value.retention_duration != null ? [
                  daily_schedule.value.retention_duration
                ] : []
                content {
                  count         = retention_duration.value.count
                  duration_type = retention_duration.value.duration_type
                }
              }
            }
          }

          dynamic "weekly_schedule" {
            for_each = retention_policy.value.weekly_schedule != null ? [retention_policy.value.weekly_schedule] : []
            content {
              retention_times = []

              dynamic "retention_duration" {
                for_each = weekly_schedule.value.retention_duration != null ? [
                  weekly_schedule.value.retention_duration
                ] : []
                content {
                  count         = retention_duration.value.count
                  duration_type = retention_duration.value.duration_type
                }
              }
            }
          }
        }
      }
    }
  }
}

Requirements

No requirements.

Providers

Name	Version
azurerm	n/a

Modules

No modules.

Resources

Name	Type
azurerm_automanage_configuration.automanage_configs	resource

Inputs

Name	Description	Type	Default	Required
automanage_configurations	The automanage configurations to be deployed	list(object({ name = string rg_name = string location = optional(string, "uksouth") tags = map(string) automation_account_enabled = optional(bool) boot_diagnostics_enabled = optional(bool) defender_for_cloud_enabled = optional(bool) guest_configuration_enabled = optional(bool) log_analytics_enabled = optional(bool) status_change_alert_enabled = optional(bool) antimalware = optional(object({ real_time_protection_enabled = optional(bool) scheduled_scan_enabled = optional(bool) scheduled_scan_type = optional(string) scheduled_scan_day = optional(number) scheduled_scan_time_in_minutes = optional(number) exclusions = optional(object({ extensions = optional(string) paths = optional(string) processes = optional(string) })) })) azure_security_baseline = optional(object({ assignment_type = optional(string) })) backup = optional(object({ policy_name = optional(string) time_zone = optional(string) instant_rp_retention_in_days = optional(number) schedule_policy = optional(object({ schedule_run_frequency = optional(string) schedule_run_times = optional(list(string)) schedule_run_days = optional(list(string)) schedule_policy_type = optional(string) })) retention_policy = optional(object({ retention_policy_type = optional(string) daily_schedule = optional(object({ retention_times = optional(list(string)) retention_duration = optional(object({ count = optional(number) duration_type = optional(string) })) })) weekly_schedule = optional(object({ retention_times = optional(list(string)) retention_duration = optional(object({ count = optional(number) duration_type = optional(string) })) })) })) })) }))	n/a	yes

Outputs

Name	Description
automanage_id	The id of automange config
automanage_name	The name of automange config
automanage_rg_name	The rg_name of automange config
automanage_tags	The tags of automange config